Description
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions.
References
- 68255 vdb-entry
- 41553 third-party-advisory
- http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt
- 20100922 OpenText LiveLink 9.7.1 multiple vulnerabilities (CSRF, XSS) mailing-list
- ecm-permissions-csrf(62057) vdb-entry